@profullstack/coinpay 0.6.11 → 0.9.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@profullstack/coinpay",
-  "version": "0.6.11",
-  "description": "CoinPay SDK & CLI — Accept cryptocurrency payments (BTC, ETH, SOL, POL, BCH, USDC) with wallet and swap support",
+  "version": "0.9.0",
+  "description": "CoinPay SDK & CLI \u2014 Accept cryptocurrency and card payments (BTC, ETH, SOL, POL, BCH, USDC) with wallet, swap and a live finances dashboard",
   "type": "module",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
@@ -17,6 +17,10 @@
       "import": "./src/payments.js",
       "types": "./src/payments.d.ts"
     },
+    "./tokens": {
+      "import": "./src/tokens.js",
+      "types": "./src/tokens.d.ts"
+    },
     "./card-payments": {
       "import": "./src/card-payments.js",
       "types": "./src/card-payments.d.ts"
@@ -32,6 +36,28 @@
     "./swap": {
       "import": "./src/swap.js",
       "types": "./src/swap.d.ts"
+    },
+    "./x402": {
+      "import": "./src/x402.js"
+    },
+    "./x402-v2": {
+      "import": "./src/x402-v2.js"
+    },
+    "./x402-browser": {
+      "import": "./src/x402-browser.js"
+    },
+    "./x402-pay-server": {
+      "import": "./src/x402-pay-server.js"
+    },
+    "./taskmarket": {
+      "import": "./src/taskmarket.js"
+    },
+    "./finances": {
+      "import": "./src/finances.js",
+      "types": "./src/finances.d.ts"
+    },
+    "./finances-tui": {
+      "import": "./src/finances-tui.js"
     }
   },
   "files": [
@@ -70,7 +96,12 @@
     "payment-gateway",
     "merchant",
     "bip39",
-    "mnemonic"
+    "mnemonic",
+    "finances",
+    "tui",
+    "dashboard",
+    "plaid",
+    "simplefin"
   ],
   "author": "Profullstack, Inc.",
   "license": "MIT",
@@ -87,15 +118,16 @@
     "node": ">=20.0.0"
   },
   "devDependencies": {
-    "vitest": "^2.1.8",
     "eslint": "^8.57.0",
-    "prettier": "^3.4.1"
+    "prettier": "^3.4.1",
+    "vitest": "^4.1.0"
   },
-  "peerDependencies": {},
   "dependencies": {
-    "@scure/bip39": "^1.4.0",
-    "@scure/bip32": "^1.5.0",
+    "@inquirer/prompts": "^8.3.0",
     "@noble/curves": "^1.6.0",
-    "@noble/hashes": "^1.5.0"
+    "@noble/hashes": "^1.5.0",
+    "@profullstack/hqtui": "^0.1.11",
+    "@scure/bip32": "^1.5.0",
+    "@scure/bip39": "^1.4.0"
   }
 }

package/src/auth.js

@@ -58,7 +58,8 @@ export async function loginMerchant(client, { email, password }) {
  * @returns {Promise<Object>} Merchant information
  */
 export async function getMe(client) {
+  // GET — the /auth/me endpoint is GET-only (a POST returns 405).
   return client.request('/auth/me', {
-    method: 'POST',
+    method: 'GET',
   });
 }

package/src/card-payments.js

@@ -309,13 +309,21 @@ export async function createCardEscrow(client, businessId, amountUSD, descriptio
   // Convert USD to cents
   const amountCents = Math.round(amountUSD * 100);
 
-  return client.request('POST', '/api/stripe/payments/create', {
-    businessId,
-    amount: amountCents,
-    currency: 'usd',
-    description,
-    metadata,
-    escrowMode: true,
+  // `CoinPayClient.request(endpoint, options)` takes TWO arguments. Every call
+  // in this file passed three, in the shape `request(method, path, body)` — so
+  // `endpoint` received 'POST', the URL became `baseUrl + 'POST'`, and `options`
+  // received the path as a string. These calls failed 100% of the time, which
+  // made releasing or refunding a card escrow unreachable through the SDK.
+  return client.request('/api/stripe/payments/create', {
+    method: 'POST',
+    body: JSON.stringify({
+      businessId,
+      amount: amountCents,
+      currency: 'usd',
+      description,
+      metadata,
+      escrowMode: true,
+    }),
   });
 }
 
@@ -346,7 +354,7 @@ export async function listCardEscrows(client, options = {}) {
   const queryString = queryParams.toString();
   const url = `/api/stripe/escrows${queryString ? `?${queryString}` : ''}`;
   
-  return client.request('GET', url);
+  return client.request(url, { method: 'GET' });
 }
 
 /**
@@ -360,8 +368,9 @@ export async function listCardEscrows(client, options = {}) {
  * const result = await releaseCardEscrow(client, 'escrow-123');
  */
 export async function releaseCardEscrow(client, escrowId) {
-  return client.request('POST', '/api/stripe/escrow/release', {
-    escrowId,
+  return client.request('/api/stripe/escrow/release', {
+    method: 'POST',
+    body: JSON.stringify({ escrowId }),
   });
 }
 
@@ -386,9 +395,9 @@ export async function releaseCardEscrow(client, escrowId) {
  * });
  */
 export async function refundCardEscrow(client, escrowId, options = {}) {
-  return client.request('POST', '/api/stripe/escrow/refund', {
-    escrowId,
-    ...options,
+  return client.request('/api/stripe/escrow/refund', {
+    method: 'POST',
+    body: JSON.stringify({ escrowId, ...options }),
   });
 }
 
@@ -404,7 +413,7 @@ export async function refundCardEscrow(client, escrowId, options = {}) {
  * console.log(status.escrow_status); // 'pending', 'released', 'refunded'
  */
 export async function getCardEscrowStatus(client, escrowId) {
-  return client.request('GET', `/api/stripe/transactions/${escrowId}`);
+  return client.request(`/api/stripe/transactions/${escrowId}`, { method: 'GET' });
 }
 
 /**

package/src/client.d.ts

@@ -41,6 +41,14 @@ export interface ListPaymentsParams {
   offset?: number;
 }
 
+/** Parameters for supported coin/token discovery */
+export interface SupportedCoinsParams {
+  /** Business ID. Required for merchant JWTs; optional with business API keys if it matches key scope. */
+  businessId?: string;
+  /** If true, only active wallets are returned. */
+  activeOnly?: boolean;
+}
+
 /** Options for the `waitForPayment` polling method */
 export interface WaitForPaymentOptions {
   /** Polling interval in milliseconds (default: `5000`) */
@@ -109,6 +117,36 @@ export interface ListPaymentsResponse {
   payments: Payment[];
 }
 
+/** Supported payment coin record */
+export interface SupportedCoin {
+  symbol: string;
+  name: string;
+  is_active: boolean;
+  has_wallet: boolean;
+  wallet_source: 'business' | 'merchant_global';
+}
+
+/** Checkout token record with lower-case code accepted by createPayment currency */
+export interface SupportedToken extends SupportedCoin {
+  code: string;
+  ticker: string;
+  chain?: string;
+}
+
+/** Response from supported coin discovery */
+export interface SupportedCoinsResponse {
+  success: boolean;
+  coins: SupportedCoin[];
+  business_id: string;
+  merchant_id?: string;
+  total: number;
+}
+
+/** Response from token discovery */
+export interface TokensResponse extends SupportedCoinsResponse {
+  tokens: SupportedToken[];
+}
+
 /**
  * CoinPay API Client
  *
@@ -186,6 +224,20 @@ export class CoinPayClient {
    */
   listPayments(params: ListPaymentsParams): Promise<ListPaymentsResponse>;
 
+  /**
+   * List supported payment coins for a business.
+   *
+   * Business wallets win; merchant global wallets are used as fallback.
+   */
+  getSupportedCoins(params?: SupportedCoinsParams): Promise<SupportedCoinsResponse>;
+
+  /**
+   * List checkout-friendly tokens for a business.
+   *
+   * Returns lower-case `code` values accepted by `createPayment({ currency })`.
+   */
+  getTokens(params?: SupportedCoinsParams): Promise<TokensResponse>;
+
   /**
    * Get a URL pointing to the QR code image for a payment.
    *

package/src/client.js

@@ -279,6 +279,45 @@ export class CoinPayClient {
     return this.request(`/payments?${params.toString()}`);
   }
 
+  /**
+   * Get supported payment coins for a business.
+   *
+   * Business API keys derive the business from the key. Passing businessId is
+   * still allowed and must match the key scope. Merchant JWTs require
+   * businessId.
+   *
+   * @param {Object} [params]
+   * @param {string} [params.businessId] - Business ID
+   * @param {boolean} [params.activeOnly] - Only return active wallets
+   * @returns {Promise<Object>} Supported coins response
+   */
+  async getSupportedCoins({ businessId, activeOnly } = {}) {
+    const params = new URLSearchParams();
+    if (businessId) params.set('business_id', businessId);
+    if (activeOnly) params.set('active_only', 'true');
+    const query = params.toString();
+    return this.request(`/supported-coins${query ? `?${query}` : ''}`);
+  }
+
+  /**
+   * Get payment-option tokens for a business.
+   *
+   * Returns lower-case `code` values accepted by /payments/create, plus
+   * display fields for checkout coin pickers.
+   *
+   * @param {Object} [params]
+   * @param {string} [params.businessId] - Business ID
+   * @param {boolean} [params.activeOnly] - Only return active wallets
+   * @returns {Promise<Object>} Tokens response
+   */
+  async getTokens({ businessId, activeOnly } = {}) {
+    const params = new URLSearchParams();
+    if (businessId) params.set('business_id', businessId);
+    if (activeOnly) params.set('active_only', 'true');
+    const query = params.toString();
+    return this.request(`/tokens${query ? `?${query}` : ''}`);
+  }
+
   /**
    * Get payment QR code URL
    *
@@ -415,23 +454,61 @@ export class CoinPayClient {
 
   /**
    * Create a new business
+   *
+   * Field names are snake_case because that is what the API reads. This used to
+   * send `webhookUrl`, which POST /api/businesses does not look at -- it reads
+   * `input.webhook_url` -- so every business created through the SDK came back
+   * with a null webhook_url and no webhook secret, silently. The value was
+   * accepted, echoed nowhere, and dropped.
+   *
+   * `category` is required by the API and was not sent at all, so
+   * `coinpay business create` failed outright with "Select a valid business
+   * category" and there was no flag to supply one. Valid slugs live in
+   * src/lib/business/taxonomy.ts.
+   *
    * @param {Object} params - Business parameters
    * @param {string} params.name - Business name
+   * @param {string} params.category - Taxonomy slug; required by the API
+   * @param {string} [params.description]
    * @param {string} [params.webhookUrl] - Webhook URL
+   * @param {string} [params.webhookSecret] - Supply one, or the API generates it
    * @param {Object} [params.walletAddresses] - Wallet addresses by chain
    * @returns {Promise<Object>} Created business
    */
-  async createBusiness({ name, webhookUrl, walletAddresses }) {
+  async createBusiness({
+    name,
+    category,
+    description,
+    webhookUrl,
+    webhookSecret,
+    walletAddresses,
+  }) {
     return this.request('/businesses', {
       method: 'POST',
       body: JSON.stringify({
         name,
-        webhookUrl,
+        category,
+        description,
+        webhook_url: webhookUrl,
+        webhook_secret: webhookSecret,
         walletAddresses,
       }),
     });
   }
 
+  /**
+   * The taxonomy a business may be created with.
+   *
+   * Fetched rather than bundled: a copy inside the SDK goes stale the moment a
+   * category is added, and a stale copy is how "Select a valid business category"
+   * happens a second time.
+   *
+   * @returns {Promise<Object>} { success, categories: [{ slug, label, group, baseRisk }] }
+   */
+  async listBusinessCategories() {
+    return this.request('/businesses/categories', { method: 'GET' });
+  }
+
   /**
    * Update business
    * @param {string} businessId - Business ID
@@ -685,22 +762,29 @@ export class CoinPayClient {
 
   /**
    * Create Stripe Connect onboarding link
-   * 
+   *
    * Generates a Stripe Express onboarding link for a merchant.
    * The merchant must complete this onboarding before they can accept card payments.
-   * 
+   *
+   * Country is required on the first onboarding call and is locked at Stripe
+   * account creation — it cannot be changed afterward. Subsequent calls (e.g.
+   * to finish remaining requirements) may omit it; the server reuses the
+   * country stored on the business. All Stripe Connect supported countries are
+   * accepted (US, CA, GB, AU, DE, FR, JP, SG, ...). See
+   * https://stripe.com/global for the full list.
+   *
    * @param {string} businessId - Business ID
    * @param {Object} [params] - Optional parameters
    * @param {string} [params.email] - Merchant email (pre-fills onboarding form)
-   * @param {string} [params.country='US'] - Country code (US, CA, GB, etc.)
+   * @param {string} [params.country] - ISO-3166-1 alpha-2 country code (e.g. 'US', 'CA', 'GB'). Required on first onboarding.
    * @returns {Promise<Object>} Onboarding link and account ID
-   * 
+   *
    * @example
    * const onboarding = await client.createStripeOnboardingLink('business-id', {
    *   email: 'merchant@example.com',
-   *   country: 'US'
+   *   country: 'CA'
    * });
-   * 
+   *
    * // Redirect merchant to onboarding.onboarding_url
    */
   async createStripeOnboardingLink(businessId, params = {}) {
@@ -913,4 +997,4 @@ export class CoinPayClient {
   }
 }
 
-export default CoinPayClient;
+export default CoinPayClient;